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meet the mass storage requirements of the program are the optical memory 
technologies. Included under this heading are the optical memory cards. An optical 
memory card is the size of a standard 54mm x 8S5nim wallet card and, in one particular 
configuration, 1s capable of storing 800 pages of text alone or 200 pages of combined 
text and graphics. Emploving optical memory card technology in the “paperless ship” 
will reduce the space required tc store technical manuals and directives by a factor of 
over 200! Two applications; A Technical Document Publishing, Distributing and 
Update Program; and An Individual Personnel Record Storage and Update Program 


are discussed as potentially beneficial to the military community. 
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I. INTRODUCTION 


A. GENERAL 

The ‘paperless ship’ is a modern naval frigate without paper technical manuals, 
directives, report forms or memoranda. The target date for making this concept a 
reality is 1990 and it is gaining acceptance at high levels in the Department of the 
Navy (DON). Vice Adnmural Joseph Metcalf, Deputy Chief of Naval Operations for 
Surface Warfare, author of the “paperless ship” concept, commented On thememien 
41,000 pounds of paper required to operate the modern naval frigate in a recent 
interview [Ref. 1: p. A-]7}. “We do not shoot paper at the enemy. . . ) it doggumes 
contribute to war-fighting. Storing information in books and manuals and documents 
detracts from war-fighting. It’s heavy. It’s not in a form that can be used.” he said. 
His sentiments are echoed by Rear Admiral Harry S. Quast, director of the Navy 
Information Systms division of the Pentagon. [Ref. 2: p. D-I}. He said, “... now we 
think this technology is the way to go... . We may find out those laser cards work 
much better (thanee p=. OMA... 

On a larger scale, the Department of Defense (DOD) has begun development of 
an integrated DOD Computer-aided Acqusition and Logistic Support (CALS) Program 
which will establish standards for contracting and implementing for future weapon and 
data svstem acquisitions. There will be a need as the CALS program develops for a 
high-data-density, low-weight and cube mass storage media to store and distribute the 
data generated by CALS. See Ref. 3 for a description of the CALS program. 

The laser card RADM Quast is referring to above is a form of optical mass 
storage medium known as an optical memory card. With the optical memory card, as 
with some other types of optical storage, digital data is read from or written to the card 
using the beam from a semiconductor laser. However, the optical memory card can 
also be pre-recorded using a photolithographic process which allows them to be 
duplicated in large quantities virtually over-night, much like a newspaper. The optical 
memory card would be one of several optical memory media that could conceivably be 
included in the CALS program standard for digitai storage media. 

As the search continues for a media to store and distribute the vast amount of 


information the military needs to function effectively in this Information Age, the 


military community will have to take a more serious look at what may now be 
categorized as “exotic” technology. Optical memory cards offer a great deal of 
potential in this area and are rapidly gaining acceptance in the optical data storage 


industry. 


B. OBJECTIVES 
This thesis was written with three basic objectives in mind: 
e Introduce the reader to optical memory cards as a technology 


e Compare optical memorv cards with other, more familiar and better established 
memory card technologies 


e Describe two potential application areas where optical memory card systems 
could be developed quickly and vet have a profound effect on the military 
community 


The conception and development of the optical memory card, along with 
background information for the Integrated Circuit (IC) card and the Magnetic Stripe 
Card (MSC), will be discussed in Chapter I]. The three technologies will be compared 
in the areas of Data Capacity, Data Security, Hardware Requirements and Economic 
Factors in Chapter III. In Chapter IV, two potential military applications will be 
discussed which couid be successfully implemented using optical memory card 
technology: A Technical Document Publishing, Distribution and Update Program; and 
An Individual Personnel Record Storage and Update Program. These applications 
were chosen because they are technologically accessible and would provide potential 


benefits over a wide range of military communities. 


C. RESEARCH METHODOLOGY 

The research methodology used in preparing this thesis was primarily a review of 
available literature to develop a working knowledge of the topic. A thorough search of 
mostly periodical publications was conducted to collect the background material. Thuis 
background material was then analvzed to produce the comparison data and synthesize 
the applications. Written materials were often followed up by telephone conversations 
with industry personnel. The comparisons presented are intended to be objective and 
provide the reader with a sense of the application domains associated with each 
memory card technology discussed. 

Finally, the applications were chosen after careful consideration of the results of 
the analysis and are programs which the author considers to be the best areas for 
successiul implementation of an optical memory card system at a minimal cost using 


off-the-shelf technology where available. 


Ii. BACKGROUND 


This chapter will introduce the technological and economical characteristics of 
optical memory cards, IC cards, and magnetic stripe cards. They are presented in the 
context of providing the reader the necessary information to comfortably digest the 
discussion cf comparisons between them. Optical memory cards and IC cards will be 
presented in greater detail than magnetic stripe cards in order to better familiarize the 


reader with these newer technologies. 


A. OPTICAL MEMORY CARDS 

The optical memory card is the brainchild of Jerome Drexler. In 1968 Diag 
left Bell Laooratories to start Drexler Technology Corporation (DIC) iia 
specializes in optical data products and has been instrumental in the growth of the 
computer industry as a leading independent supplier of materials used in the 
manufacture of integrated circuits. [Refi 4: p. 4] 

In August 1978 DTC introduced the concept of the optical memory card 
[Ref. 5: p. 120} and made their first optical memory card product, LaserCard® 
available in engineering quantities in 1981 {Ref.6:p. I] DTCs strateayeiias 
commercializing the optical memory card is to focus its efforts on the development of 
the media and relies on its licensees to develop viable systems. In late 19S2ieaim 
commissioned Stanford Research Institute to develop the basic technology for reading 
and writing the cards and sells that information with its licenses [Ref. 3: p, 121) ie 
optical recording media DTC uses in it’s optical memory cards 1s a patented DIC 
product called the Drexon Media®. Drexon® is created from the chemical conversion 
of high resolution photographic emulsions using a proprietary process that produces a 
thin film or crust of silver particles near the surface of an organic film or colloidial 
matrix. (See Figure 2.1) An underlayer of essentially the same maternal, withouterae 
silver particles, serves to thermally isolate the crust, increasing laser efficiency during 
Write Operations and reflective contrast during read operations. These two layers are 
protected by an encapsulation layer of thick, transparent polycarbonate material. 
PSST RS ofa 74¢ 

Writing on the optical memory card is accomplished in two ways, by laser 


recording and/or bv high-speed photolithography. When using a laser to record data 
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Figure 2.1 Construction of the Recording Medium. 





on a card the crust of the Drexon® material is heated above 200° C causing the 


organic colloidial matrix to melt and form a pit into the underlaver (Sce Figure 2.2). 
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Pigure 2.2” Laser Writitig Opcration. 


This can be accomplished using an inexpensive, semiconductor laser (typically 5 


milliwatts) and opto-mechanical scanning system (See Figure 2.3). During certain 


]} 


stages of manufacture, the photographic emulsions used in the Drexon® material are 


light sensitive. This property allows DTC to 
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Figure 2.3 | ypical Laser-Optical Read; Write System. 


pre-record cards using the same photomask mastering techniques used in the 
manufacture of integrated circuits. Using this process, read-onlv and laser-updatable 
cards can be literally “printed” in large quantities. In fact, all of DECs optical memory 
cards are pre-formatted at the time of manufacture using this process. The optical 
memory card is read using a light source, usually an incandescent light source or 
secnuconductor laser (low-power mode), and a photo-detector array or Charge-Coupled 
Device (CCD). Data is decoded from the card by measuring the reflectivity ol etie 
crust layer (typically 40%) and essentially reading the pits created by the write process. 

DTC manufactures the Drexon Media® in 16mm and 35mm widths. The optical 
memory card is essentially a stripe of Drexon® material mounted on a standard 54min 
X 85.5mm wallet card (See Figure 2.4) and manufactured by DIC in three basic 
configurations: A stngle stripe of [6mm or 35mm of Drexon® on one side, A 35mm 
stripe of Drexon® on both sides, A dual-function card with both a magnetic stripe mn 


the American National Standards Institute (ANSI) position [Ref. 8 p. 4] and an 
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Figure 2.4 Typical Optical Memory Card. 


optical stripe on one side. The dual function card is intended to be compatible with 
transaction terminals not vet equipped to use the optical stripe. Formatted capacities 
for the cards (using 10 micron pits) are: 625 kbytes for cards with a single 16mm 
Stripe, 2.2 M{bvtes for cards with a single 35mm stripe (4.4 \f{bytes both sides covered), 
and 625 kbvtes optical and 212 bvtes of magnetic storage on a dual-function card 
Beery: p. 65). Pit size could theorctically be reducect to less than | micron. A 0.4 
micron pit size would vield a capacity of over 200 Mbytes per card. This ts currently 
not being considered by the industry due to the micreased hardware costs involved and 
DTC market research indicating a marginal demand for a card-sized storage medium 
Patea Capacity greater than 20 Nibytes {Ref. 9: p. 1]. 

Quantity costs for cards run from $1.00 each for blank cards to around $5.00 
each for 2.2 Mbyte pre-recorded cards. For large runs of identical cards the most cost 
effective method of duplication is to have Drexler master, format and duplicate the 
cards. Equipment suitable for on-demand publishing of up to 500 cards will cost 
around $10,000. For publishing or updating small numbers of cards, several of DTC's 
licensees have announced plans for marketing laser reader-writer units using a Direct- 
Read-After-Write (DRAW) recording process that will cost in the area of $500 - $1000. 
Read-only equipment for reading pre-recorded cards will cost around $200. Some of 
these companies intend to market their equipment commercially in the Qtr. 3 - Qtr. 4, 
heey cuinctrame. {Ref. 10: p. 289] 
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DIC is currently working with its licensees to provide second-source 


opportunities for the manufacture of their optical memory cards. 


B. INTEGRATED CIRCUIT CARDS 

The integrated circuit card, or “Smart Card” as it is called by the consumer 
electronics industry, was first introduced commercially in 1974 by French journalist and 
inventor Roland Moreno [Ref. 11: p. 75]. An IC card is essentially a standard 54mm X 
85.5mm wallet card with one or more integrated circuit chips imbedded in it. Most 
cards are manufactured to International Standards Organization (ISO) standards 
[Ref. 12: p. 2] incorporating a magnetic stripe and embossing area to fetam 


compatability with existing equipment (See Figure 2.5). Some recently developed cards 


INTEGRATED CIRCUIT GROUND Vpp DATA I/O MAGNETIC STRIPE 


EMBOSSING 
AREA 





figure 2.5@ lypical tC Gat 


contain a transducer to simulate the signal usually generated by the magnetic stripe. 
[Ref. 13: p. 35]. External connections to the chip are made through the e:ght galsaime 
contacts shown in Figure 2.5 These contacts provide power (Vcc), a reset signalya 
clock signal, data Input and Output (J, O) signals, a programming voltage (Vpp), and a 
circuit ground. [wo of the contacts called for in the standard ure for future expansion 
and currently unused. IC cards are manufactured in two configurations, with and 
Without an on-card microcomputer. Cards without a microcomputer contain 
essentially an 1,O interface, some memory access logic and some form of non-volatile 


memory, usually Erasable Programimable Read-Only Memory (EPROM) which must 
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be erased using ultraviolet light or Electrically Erasable Programmable Read-Only 
Memory (EEPROM) whicn is erased by a programming voltage from the terminal (See 


Figure 2.6). These cards are primarily used in applications where a requirement exists 
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Figure 2.6 Contents of the Memory-Only IC Card. 


for a s1mple memory 1,O function with a minimum of data security. An example 
would be an electronic combination key or a simpie debit card for use in a financial 
transaction svstem. Cards incorporating a microcomputer consist of essentially a 
Microcomputer Unit (MCU) and some form of non-volatile memory. The on-card 
Sesten) Mav be implemented as a single chip or s@veral chips. A single chip 
implementation is preferred by industry because it provides the most reliable and cost 
effective design. A single chip iniplementation also has certain advantages in the area 
Sieata security, which will be discussed in the next chapter. [Ref. 12: p. 2-3] 

The actual configuration of the MCU itself depends heavily on the requirements 
of its intended application. Most applications require, as a minimun: A Central 
Processing Unit (CPU), some working Random Access Memory (RAM), soine 
program(s) stored in Read-Only Memory (ROM), some serial 1’O control logic, and 
Somiemiorn of non-volatile memory such as EPRON or ELEPROM (See ligure 2.7). 
[Ref. 14: p. 2-4] Some of the more sophisticated cards currently available also include a 
keyboard and an alphanumeric display. Most MCU’s used in IC cards are 8-bit 
computing devices. The main function of the MCU ts to control access to the non- 
volatile memory and/or perform operations on data contained in the non-volatile 
memory. The MCU accomplishes this by executing program routines stored in the 


program ROM. 
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Figuce 2.7 Contents of the MICU 1G Gare 


The complexity of these routines 1s dependent on the application the card will be 
used in. Because the MCU can be programmed for different functions, non-volatile 
memory can be segmented! and access to the various seginents controlled at different 
levels by the MICU. For example, in an Ulectrome Funds Transfer (EF 1) appheamem 
memory could be segmented into Unconditional, Confidential and Secret access gomes 
(Sec Figure 2.8) The Unconditional access zone would allow unconditional read access 
to data such as: Name, Address, Telephone Number and Account Number. The 
Confidential access zone would allow conditional read/write access to data such as: 
Merchant ID, Date of Transaction, and Amount of Purchase (Audit Trail). The Seren 
access zone would be conditionally accessible for read-only operations on data such as: 
Cardholder's Personal Identification Number (PIN), [D of the issuing igemiers 
Manufacturer's Code, Card Serial Number and the Starting Account Balance. 
UNeSG eee 3) 

The ability for the IC card to function autonomously of a host computer is scen 
as a valuable asset by the banking industry and has led to several pilot studies Using 
the IC card as an off-lme EFT device Reis. ae 

IC cards are manufectured in the United States, Europe and Japan. Pricing is a 
function of card features and memory capacity. Current prices for quantity sorgen 
range from $3.00 - $5.00 each for 8 kbyte cards to $8.00 for a 16 kbyte card and $20.00 
for a 16 kbyte card with a keypad and display (Japan) [Ref. 13,16: po 435], ieee 


reader/writers average about $100.00 each for installation in on-line terminals and less 
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Figure 2.8 \I[emory Segmentation for a Financial Transaction Card. 


than $40.00 each tn quantities for units that would connect to an off-line termunal or 
Personal computer [ief, 17.13: p. 19,35}. 
C. MAGNETIC STRIPE CARDS 

fie sconccmimo! the magnetic stripe card (NISC) has been in use tn the banking 
Pm@emstty since the carly 1970s with IBN\I as a major force in its development 
[Ref. 18: p. 62}. The MSC was follow-on technology to machine readable embossing 
svstems already in use for financial transaction cards. The technology was developed 
out of a need for higher data densities on credit cards to mect the informational 
requirements of the banking industry. [In 1974 the ANSI standard for financial 
transaction cards contained two read-onlv tracks, one high-density track (Track I) and 
one low density track (Trick 2). In [980 a standard was established for a third track 
With high density read, write capabilities. The current MSC is essentialiv a 10.2Smimn 
(minimum) stripe of standard magnetic material mounted on a 54mm X $5.5mm wallet 
mometoce Figure 2.9) (Ref. 19: p. 10). 

[ndustry standards for bit density and data encoding can be found in Ref. 8. 
Ustng the standard, Track 1 would have a capacity of 335 bits, Track 2 would have a 


density of 255 bits and Track 3 would have a capacity of 658 bits for a total of 1228 
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Pigure 2.9 Typical \lagnetic Stripe Card, 


bits or 153 bytes. Using higher density recording techniques this could be increased 
Slightly. With the proliferation of the MISC mto the world {nanctal market more than 


[5 vears ago, availablity of the medium ts not an issue. At $0.50 each in quantities, 


neither 1S price. 


IS 


Hi. COMPARING THE TECHNOLOGIES 


It will soon become apparent, if not already, that the magnetic stripe card (MSC) 
is not in the same competitive league in terms of capacity and functional capabilitv as 
the other two memory card technologies discussed. The reasoning behind including the 
MSC in the study was to provide a well known and widely accepted technology for the 


reader to use as a reference point in the following discussions. 


A. DATA STORAGE CAPACITY 
This section will discuss the data storage capacities of the technologies presented 
in Chapter 2, using an example application wherever possible. First, a review of the 
published data storage capacities of each technology. 
1. Optical Memory Cards 
Optical memory cards are currently available with the following capacities 
Ore, 7: p. 65]: 
@ Single 16mm optical stripe - 625 kbytes (Formatted) 
¢ Single 35mm optical stripe - 2.2 Mbytes (Formatted) 
¢ 35mm optical stripe on both sides - 4.4 Mbytes (Formatted) 


¢ Dual function card: 16mm optical stripe and ANSI magnetic stripe - 625 
Kbytes Optical, 22 bytes nia@enetic 


TiveseWaurmoers assume a |0 micron pit Size. it is possible to reduce the pit 
size to less tnan | micron, but this would require a substantial increase in hardware 
cost. DTC is currently working on a higher density card that would provide an & 
Mbyte capacity and capacities of 10 Mbytes or more are theoreticaliy possible by 
simplv increasing the total surface area of the card that is covered by the recording 
media [Ref. 20]. The optical memory card will be considered a high-density storage 
medium for the purposes of the following discussions. 

2. Integrated Circuit Cards 

Integrated circuit (IC) cards are available with a wide variety of capacities. 
This is due to the fact that a particular card is usually designed to meet the needs of a 
particular application. Some of the more popular memory sizes are 2, 8 and 16 kbytes 
for MICU cards. Memory-only cards are available with capacities up to 64 kbytes. 
(Ref. 15,16: p. 41.35] For the purposes of the following discussions the IC card will be 


considered a medium-density storage device. 


He 


3. Magnetic Stripe Cards 
In its current form the magnetic stripe card (MSC) has a capacity of 153 bytes 
in ANSI format [Ref. 8]. This could be increased to over 200 bytes using higher 
density recording formats. The MSC will be considered a low-density data storage 
medium for tne purposes of the following discussions. 
4. Comparison of Data Storage Capaeities 
As a high-density storage medium the optical memory card is best suited for 
the storage and distribution of relatively large amounts of data. A 2.2 Mbyte optical 
memory card holds the equivalent of 800 pages of text or 200 pages of graphics and 
text combined. Some applications for a storage medium with this amount of capacity 
would be: 


¢ Distribution of information from large, centralized databases to smaller regional 
databases 


e Distribution and update of technical manuals and other publications 


e Storage and update of personnel service. pay and medical records in a much 
more convenient and transportable form than the current paper method 


e Very high security restricted access systems that require large amounts of 
storage for recording biometric data such as voiceprint, fingerprint and 
signature analvsis used to positively identify the cardholder 


As a medium-density storage device the [C card 1s best suited for applications 
within its memory capacity that require a minimum of off-card electronics such as: 
e Personal identification tags badges not requiring the storage of biometric data 


e Electronic access keys for restricted access systems. Codes could be chamaga 
electronically without the knowlege of the cardholder 


@ Encoding kevs for cryptographic equipment. Keys could be encoded 
electronically without the aid of a human operator, as in the present system 


As a low-density data storage medium the MSC is best suited for applications 
requiring a minimum of data storage and a minimum of securitv. An example 
application would be an on-line exchange, commissary privilege verification card. 

In the area of data storage capacities the three technologies discussed 
naturally fall into distinct categories (See Table 1). The low, medium and high-density 
categories each have their own application areas which suit them best. I[hese 
application areas could theoretically overlap, but usually not in an effective and 
efficient manner. Using an optical memory card in an MSC application, for example, 
could be considered “capacity overkill” and probably would not prove to be 


advantageous from an economic standpoint as well. 
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JUSBIEIE S| 
SOA ingen Or DATA STORAGE CAPACITIES 


OPTICAL MEMORY CARD * 
(Pre-formatted) 


Single 16mm stripe - 625 kbytes 

Single 35mm optical stripe - 2 2 Mbytes 

Dual-sided 35mm optical stripe - 4 4 Mbytes 

Dual Function Card - 625 kbytes optical, 212 bytes magnetic 
INTEGRATED CIRCUIT (IC) CARD* 


MCU Cards - 2, 8, 16 kbytes 
Memory Only Cards - Max. 64 kbyte 


MAGNETIC STRIPE CARD (MSC) 
Three Track ANSI Standard - 153 bytes 
High-density Format - 212 bytes 


* increases with advances in technology 


B. DATA SECURITY 
This section discusses the data security issucs assoctated with memory card 
technologies. The discussion will focus on two specific areas: Physical Securtty and 
Logical Security. The strengths and weaknesses of each technology will be covered as 
they relate to these two areas. Physical securrty will address the following issues: 
e Physical access methods of each technology and their security tmplications. 


® Environmental [actors - Temperature, Electromagnetic Pulse (EMP), 
Picemom gamete. Iniererence (IE NVIN) {includine Radio frequency Interference 
il) ee rds Seatdetelectrostattc Discharge (1:1). 


e Intentional Unintentional destructron of data stored on the card. 
Logical Security will address the following tssues: 

e System Access and Access Leveling. 

e Data Encoding - Encoding and algorithmic encryption schemes. 

1. Physical Security 
Phystcal security, in the context of this study, deals with the physical aspects 

of a particular medium as they relate to protectron of the data contained im the 
medium. In other words, how secure is the data stored in a particular medium from 
compronuse or loss through physical access operations, environmental factors and 


intentronal or unintentional destruction. 


a, Physical Access Methods 

The first issue 1s physical access method. Compromising emanations are 
most likely to occur during access operations, resulting in compromise of the data 
stored on the card. Compromising emanations are intelligence bearing signals which. if 
intercepted, could possibly be anaivzed to disciose the content. classified or otherwise, 
of the information received. TEMPEST 1s an unclassified short name that reremaams 
Investigations and studies of compromusing emanations [Ref. 21: p. A-6). 

(1) Optical memory Cards. The optical memory card is accessed using a 
svstern similar to the one shown in Figure 2.3, The card itself is written 10yGpeneem 
using the beam generated by the semiconductor laser. [The only sources for TEMPiest) 
violating signals occur in the circuliry prior to the semiconductor laser and following 
the CCD. One drawback unique to the optical memorv card and optical memory 
systems in general is the effect of surface damage or obliterations on the accuracy oF 
data write.read operations. The relative thickness of the encapsulation laver (See 
Figure 2.1) serves to keep small scratches and surface dust from appearing in themed 
plane of the laser beam as it 1s focused on the optical media in an attempt to reduce 
the arnount of error introduced by these contaminants. However, a defect lamge 
enough to echpse a substantial portion of the laser beam can cause data to be 
misrepresented during write read operations. The impact of such errors is 2 funmetiemeam 
the software used to interpret the data in terms of the error detection and correction 
codes employed. The ability of these codes to recover lost or misrepresentedyaama 
determines how much of an obliteration the system will tolerate. 

(2) Integrated Circuit Cards. The IC card 1s usually accessed through the 
eight galvanic contacts located on the front or back of the card. In some unique 
applications the card is accessed using wireless technologies [Ref. 22: p. 78]. These 
svstenis Were not considered by this author to be appropriate for a military TEMPEST 
environment and therefore are not discussed here. Because the IC card employs active 
components it presents more opportunities for data compromise during access 
operations. This problem is especially pronounced in cards designed using more than 
One chip (See Ficure ca 

In this configuration, each CPU request to 4 Separate memoryeeume 
must traverse a data bus external to the CPU, thereby generating compromusing 
emanations [Ref. 12,14: p. 3.4]. The same argument could be used for the serial [,O 


bus used to communicate with the card. In essence, the IC card has the potential for 


t Serial 1/O Bus t Memory Access Bus | 


GONTACTS * 
DATA I/O — TSERIAL 1/O 
teu 
Reset “FSH EPROM 
RAM EEPROM 


ROM 





*Vcc, Vpp (EEPROM only) and Ground not shown 


tPossible source of TEMPEST violating signals 


Figure 3.f [C Card Incorporating More Than One Chip. 


coinpromising sensitive data if not used in a_ sufficiently TEMPEST hardened 
environment. The IC card does present tremendous potential for use in high-security 
Systems, assuming the’ physical security drawbacks can be solved for a given 
application. This topic will be discussed in greater detail in the section on Logical 
Security. It should also be noted that the advanced computing capabilities of third 
generation IC cards, those incorporating keyboards and displays, enable them to be 
used in stand-alone appheations without the need for a separate terminal. The system 
functions are essentially performed by the card itself. 

(3) Jfagnetic Stripe Cards. Access to the data stored on an MSC is 
gained through the physical contact of the magnetic stripe with a magnetic read, write 
head installed in an appropriate device. Like the optical memory card, the MSC 
contains no active coinponents. The proliferation of inexpensive MSC read/write 
equipment and the relative simplicity of the technology has resulted in the creation of 
some highly lucrative counterfeiting and fraud schemes that cost the U.S. banking 
teustry well over $300 million a year |[Ref. 17: p. 1S}. Some security advances were 
made in the nud-1970's using infrared identification systems [Ref. 23: p. 62] and more 
recently magnetic waterinark technonology [Ref. 24: p. 101]. These techniques 
provided additional security by making cach card unique. 

(4) Comparison of Physical Access Methods. The primary issue under 


physical access methods is whether the particular technology is a passive or active 
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storage medium. The passive technologies, optical memory card and MSC, provide 
nothing more than data storage capabilities. Without any on-card active components 
the card itself cannot generate any compromusing signals. The optical memory card, 
because of its unique manufacturing process, is difficult to counterfeit. Even though 
the data pits are visible, data 1s difficult to compromise because in order to do so one 
must have a knowledge of the system context and encryption, encoding techniques used 
to record the data in order to decode the data once it is read. The optical stripe cannot 
be removed from the card without damaging it beyond repair. 

Cards that are photolithograpnicaliy pre-recorded could be protected 
‘rom unauthorized duplication through hardware detection of pre-recorded versus 
locally written data. Optical memory cards could be made even more secure by 
increasing the surface reflectivity of the Drexon® material (typically 40%) during the 
manufacturing process to produce an “optical watermark” pattern to further prevent 
counterieitins. [Reis a. fi 

The MSC is not so fortunate. Equipment for reading, altemmeman 
duphceating data stored on MSCs is readilv available or easily constructed from parts 
available at any local electronic supply store. In an effort to increase worldwide 
acceptance in the banking industry, certain national and international standards for 
encoding data are in widespread use in MSC systems [Ref. 8]. These standards are also 
applied in many non-banking applications of MSC systems and are readily available to 
potential abusers of the system. Regardless of the data encoding scheme used, data 
contained in an MSC is still susceptable to compromuse by the ease of physicai access 
to it. 

In direct contrast to the passive memory card technologies, IC cards 
contain components that must be electronically active for physical access operations to 
take place. These components generate compromising signals and so the cards must be 
used in TEMPEST approved environments to prevent the compromise of sensitive 
data. Of course, if the level of TEMPEST security ts not an issue for a paruemimam 
application then these signals are not a problem. With the IC card’s potential for high 
levels of logical security, the additional cost incurred by using TEMPEST approved 
systems that exploit this feature would be warranted. 

b. Environmental Factors 
A second issue in the area of physical security is the sensitivity of these 
storage media to environmental factors such as: Temperature, EMP, EMI, X-rays and 
ED 


(1) Testperature. None of the technologies discussed here are fireproof. 
The optical memory card is sensitive to temperatures near 200° C and above due to 
the melting point of its laser recording medium. Low temperature limits for the 
lasercard are a function of the low temperature fracture limits of the materials used in 
their manufacture. IC cards are limited primarily by the operating temperature range 
of the integrated circuits they contain. {SCs are temperature limited by the plastics 
used in their manufacture. 

(2) Electromagnetic Pulse (EMP). Electromagnetic Pulse (EMP) 1s a term 
that refers to the intense electromagneiic field generated by the detonation of nuclear 
weapons. This field travels away from the point of detonation tn the form of a 
wideband, high-amplitude, short-duration pulse of electromagnetic energy. The degree 
of damage inflicted on a particular piece of equipment is primarily a function of the 
distance of the equipment from the point of detonation. 

Of the three technologies discussed, the optical memory card is the 
only one not affected bv EMP. However, the optical memorv card’s immunity to EMP 
does not extend to the equipment used to read and/or write on it. 

(3) Electromagnetic Interference (EMI). Electromagnetic interference 
appears in the form of electromagnetic waves of varying amplitudes and wavelengths 
that are generated by electrical and electronic equipment. The same holds true for any 
current carrying conductor. The amount of interference experienced by a particular 
storage medium is primarily a function of the strength and location of the EMI emitter 
relative to the storage medium and how well the storage medium ts shielded from EMI. 

Ceuctmincmonmwcardseire moteaiected by EMI. MSCs are only 
affected by EMI fields large enough to overcome the coercivity (resistance to 
magnetization) of the magnetic stripe at a level sufficient to alter the data stored on it. 
IC cards are susceptible to EMI fields of sufficient strength to induce errors into data 
being transferred on internal and external busses or cause actual damage to the ICs 
tiemselves. 

(4) X-Ray Radiation. Optical memory cards are not affected by A-ray 
radiation. IC cards, like other semiconductor devices. can be severely damaged by 
high-energy X-rays as they pass through their integrated circuits. MSCs can be 
damaged by X-ray emitters in varying degrees, depending on the intensity of the X-ray 


source. 
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(5) Electrostatic Discnarge (ED). Electrostatic Discharge (ED) damage is 
a phenomenon associated only with IC cards. Electrostatic potentials of up to 15.000 
volts can be accumulated on the human body and discharged into the card by the 
simple act of transferring the card from one person te another. This discharge can 
severcly damage the semiconductor components of the card. Testing to date has 
produced results indicating that only a small number of manufacturers make cards 
capable of witnstanding even a 10,000 volt ED. [Ref. 26: p. 121]. 
c. dntentional] Unintentional Destruction of Data 
Intentional/unintentional destruction of data, whether for security reasons 
or by agents of a subversive organization, can be accomplished in several ways: 
Optcal memory cards can be burned, shredded, mutilated or overwrittemeeagee 
equivalent of writing a pit in every position). IC cards and MSCs can be destroved by 
exposure to any of the environmental factors discussed earlier that would result in the 
physical destruction of the card and its components or the effective neutralization of 
tne storage medium. Non-destructive alteration of data for subversive purposes, as the 
following section suggests, 1s not as easy as complete destruction. 
2. Logical Security 
Logical security, in the context of this study, relates to the logical safeguards 
employed in each memory card technology to prevent unauthorized access or 
manipulation of data stored on the card. Logical security will be discussed in the 
following areas: Svstems Access and Access Leveling, Data Encoding and Encryption. 
The limited capacity of the MSC restricts systems that employ this technology to using 
relatively simple system access and data encoding schemes. Since most of the material 
in this section is not directly applicable to MSCs, that medium will not be discussed. 
Bear in mind that most of the svstems access, access leveling, data encryption 
and encoding methods discussed are a function of software. As such, they can be 
implemented on either optical memory card or IC card systems with anequ 
expectation of success, the major difference being where the processing takes pice -- 
On Or Ol the card: 
a. System Access and Access Leveling 
System access and access leveling techniques focus mainly on 
indentification of the entitv, human or computer, attempting to gain access to data 
contained on the memory card and control of the level of data access the entity is 


eititled to. 
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System access control 1s mainly a matter of providing the system with the 
means to accurately determine the identity of the entity attempting to gain access to 
Mies cle mime m0 seclire tne $)Steim needs to be, the more sophisticated the svstem 
access controls required. Here are some access control techniques that could be used 
with memory card systems and the amount of memory they require [Ref. 27: p. 5}: 


¢ Password/Personal Indentification Number (PIN) -- Varies with the length of 
the password or PIN 


@ Digitized Fingerprint/Retina Scan -- 25 kbits 

e Digitized Signature -- 25 kbits 

e Digitized Voiceprint -- 50 kbits 

e Digitized Photograph -- 50 kbits 

iimemtecuniducsudesctlocd apove, thie only one currently used with IC 
faras is the PIN. !mplementations of the password/PIN essentially compare a user 
entry to a password or PIN stored in card memory to determine the access rights of 
mremiser,  !i te’enmiry matches, tie user is granted access. If the entry doesn’t match, 
the user is given further opportunities to make the correct entry. After a 
predetermined number of incorrect entries are made the card locks itself and must be 
returned to the issuing authority to be unlocked. Some PIN implementations allow the 
user to change the PIN at will, thus increasing the security of the system. The other 
techniques perform essentially the same function with greater personalization of the 
access criteria. These more sophisticated techniques could easily be implemented on 
optical memorv card systems and still leave a substantial amount of memory capacity 
for user data. Implementing these techniques using memory card technology can be 
especially advantageous to large organizations. DoD for example, which has a large 
and highly mobile user population with a variety of security clearances, would benefit 
from such a system because it places personal access data in the custody of the 
individual and reduces the requirement for on-line access verification systems 
Mier o29: p. 2]. 
Access leveling is a technique that divides the available card memory into 

linuted access segments, allowing access only to entities that meet the access criteria 
defined for that access level. See the financial transaction card example in the previous 


chapter. 


b. Data Encoding and Encryption 

Data encoding defines the format used for representing the data as it is 
stored in the memory card. For example, the American Standard Codeusies 
Information Interchange (ASCII). along with any system-specific parity or error- 
checking bits, is a data encoding scheme. 

Data encryption techniques define the algorithm and keys used to encrypt 
the data before it 1s encoded and stored on the card. The details of implementing these 
algorithms and keys are beyond the scope of tlus thesis. However, essentially, 
encryption techniques allow data to be put into a secure form, stored on the card and 
decrypted only by a system with knowledge of the algorithm and keys. A simple 
exainple would be an A, A-1I type of algorithm that positively displaces the ASCII code 
for each character by two, the encrypting key (assume modulo 128). To decragmaaae 
algorithm, the system receiving the data would subtract two from each ASCII 
character (the decrvpting key) to recover the original data. The algorithm and its 
associated kevs could be stored on the memory card, or just the keys [Ref. 23: jouezaaue 

As stated previously, any of the system functions discussed above could be 
unplemented on optical memorv card or IC card systems. Assumung the memory is 
available to implement the particular technique desired. The major issugismam@e 
sophistication of the hardware. IC card systems require very little in the form of 
external hardware since the processing of security access and data encryption 


algorithms takes place on the card itself. 


C. HARDWARE REQUIREMENTS 

This discussion will focus on the hardware requirements for optical memory cards 
and IC cards. MSCs have essentially the same hardware requirements as optical 
memory cards in that they must be used in systems supported by a host computer and 
have no processing capability of their own. They are interfaced using industry 
standard serial interfaces. 

The optical memory card requires a hardware reader or reader/writer unit to 
facilitate the actual transfer of data to and from the card. This is usually accomplished 
by using a device that is peripherally connected to a host computer system. This 
device contains the electro-optical/mechanical parts required to perform the physical 
data transfer function and the logic circuitry required to address and prepare the data 


for transfer to the host computer. (See Table 2) Data is usually transferred to the host 
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using RS-232C, Small Computer Serial Interface (SCSI), or PC compatible tvpe serial 


interfaces. Data transfer speeds are typically 100 kbits per second for read operations 


PAD? 
SOME RISO N Ol re Ok y CARD IIARDWARE REQUIREMENTS 


OPTICAL MEMORY CARD 
(PC Compatible Unit) 


Type of device: Read Only, semiconductor laser (low-power), CCD 
Read /Write, semiconductor laser (dual-power), CCD 
Type of Host Interface: Serial, IBM Compatible, RS-232C, SCSI 
Data Transfer Rate: Read, typically 100 kbits/sec. 
Write, typically 8-10 kbits/sec. 


Access Time*: Typically 1 sec. 


INTEGRATED CIRCUIT (IC) CARD 


Type of device: Read/Write, provides serial communications with on-card 
ue chips. Also provides Vcc, Vpp, clock and control signals. 


Type of Host Interface: Serial, typically RS-232C 


Data Transfer Rate: Typically 1200,2400,9600 bits/sec. 
ened: on system design. 


Access Time*: Typically 100psec. 


MAGNETIC STRIPE CARD (MSC) 

Type of device: Read/Write, magnetic head. 

Type of Host Interface: Serial 

Data Transfer Rate: Varies with speed of card through device. 


Access Time*: Variable (sequential storage medium) 


* Time to locate a given memory location 


and 8-10 Kbits per second for write operations. These figures are for production 
prototype PC-compatible units. Card access times are typically one second. 
[Ref. 29: p. 36-38] 

The IC card also requires a reader’ writer unit that can function as an on-line 
terminal for a computer system or a stand-alone unit for off-line applications. The 
reader Writer essentially acts as a communications interface providing 1/O signals Vcc 
and Vpp voltages. clock and control signals. Data is transferred using predominantly 
RS-232C serial interfaces at speeds from 1200 to 9600 bits per scvond. (See Table 2) 
[Ref, 29: p. 36-38] 
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D. ECONOMIC FACTORS 

There are two major economic issues relative to optical memory cards and IC 
cards. Cost and Avarlabiltty. They applv to both the memory cards themselves and 
their associated hardware. These issues do not apply to MSCs because the maturity of 
that medium has stabilized its cost and availability in the marketplace. 

lL. Cost 

Comparative costs for optical memory and IC cards are based on capacities 

and features. (See Table 3) Optical memorv card costs range from $1.00 for blank 
(pre-formatted) cards to $5.00 for 2.2 Mbyte cards. 1C cards run anvwhere frommusasam 
- $5.00 for 8 kbvte MCU cards to $8.00 for a 16 kbyte MCU card) This gives ames 
per bit ratio of 5.68 x 10°° cents for blank cards to 2.84 x 10°> cents for 2.2 Mibvte 


(17.6 Mbit) pre-recorded cards. The price per bit ratio of an 8 Kbyte (64 kbit) card 1s 


JONES. 3 
ECONOMIC COSIPARISON OF NIE VICI Cro 


MEMORY CARD TECHNOLOGY COST AVAILABILITY 
OPTICAL 
MEDIUM 5.68 x 106 Limited to single 
(Cents/Bit) (Blank 2 2Mbyte Cards) supplier (DTC) 

2 84x 10-5 

(2 2 Mbyte card, pre-recorded) 
HARDWARE Read Only, typically $200 tee ig eee Rae 
(Industry Estimate) Resdniet avail. Q-IV'87 ( 


ite, 
typically $500- $1000 


INTEGRATED CIRCUIT 
MEDIUM 1.88 x 10-2 Good Manufactured 
(Cents/Bit) (8k byte MCU card) domestically . Alsoin 
Europe and Japan. 

6 25 x 10-3 

(16kbyte MCU card) 
HARDWARE On-line, $100 Limited to quantity 
(Industry Estimate) Cee (PC compatible), orders. 


L.88 x 10° and 6.25 x 10°73 for 16 kbvte (128 kbit) cards. In these terms, the optical 
memory card presents a ciear advantage over the other two in cost per unit of storage. 
This can be attributed to the smaller manufacturing costs associated with the 


production of a storage medium that doesn’t use senuconductor technology. 


Comparative costs for optical memory card and IC card readers and 
heqdCcl airerseare bDascdsem iunction. The differentiation between read-only devices 
and read/write devices doesn t apply to IC card svstems because the same device can 
be used to perform both functions. These units average $100 for units intended for use 
in on-line host computer applications and as low as $40 for units intended for use in 
off-line stand alone applications with terminals or PCs. Read-onlv units for optical 
memory cards are projected to be initially around $200 and read write devices 
$500-S1000. (See Table 3) In late 1985, a large health insurance firm received the first 
of 60,000 reader/writer units to be delivered by a large Japanese manufacturer by mid 
Memiive 195/ at an average price of less than S/00 each. {Ref. 30: p. 12}. The 
substantial differential between hardware costs of these two technologies is another 
result of the passive/active nature of their storage media as well as their relative 
maturities. The optical memory card, being a passive storage medium requires more 
technology in the reader, writer unit than the more complex active storage medium used 
in the [IC card. Also. 1C card hardware 1s more mature in the marketplace than optical 
memory card hardware. 

2. Availability 

Optical memory cards capable of both read and write operations are currently 
available onlv from DTC and are manufactured in a single facility located in Mountain 
View, California. This facility is capable of a maximum output of 100,000 optical 
memory Cards per day (Ref. 31: p. 9]. A read-only optical memory card was introduced 
in Japan in 1985 by a large Japanese printing firm which intends to market the product 
femetise i electronic books. (Ref. 32: p. 32). DIC has indicated a willingness to enter 
into second-sourcing agreements with their licensees [Ref. 31: p. 9]. 

IC cards have been in use for some time in Europe and Japan. Manufacturers 
in these areas produce a wide variety of IC card products. [IC cards have entered the 
U.S. market in recent vears with several large banking firms running market tests. The 
U.S. Army has recently tested an 8 kbyte chip for use as an identification tag in its 
Individually Carried Record (ICR) program. The IC card is readily available from 
several U.S. and foreign manufacturers :n several standard forms. Most manufacturers 
will accept quantity orders for custom cards designed for specific applications. The 
same availability is enjoved by readwrite equipment from essentially the same 
eerapanies. (See lable 3) (Ref. 29,28: p. 36-38,6} 


As an overall comparison it 1s clear that each memory card technology is best 
suited for a particular range of applications. MSCs are good for low cost, low data 
density and low security applications. IC cards provide solutions for medium data 
density, highly secure data storage and communication applications that require a 
mininium of external electronics. Optical memory cards present an opportunity for 
high density data storage with minimal weight and cube storage requirements. If 
additional security is needed, optical memory card systems can implement a number of 
highly sophisticated biometric parameters to control access to the data stored on them. 

The next chapter will explore two possible optical memory card applications 


suitable for a military environment. 


IV. POTENTIAL MILITARY APPLICATIONS 


A technical document publishing, distribution and update program and an 
individual personnel record storage and update system are two potential mulitarv 
application areas for optical memorv card systems. The first, adapted from Ref. 30, 1s 
an area where industry analvsts feel the optical memory card will have the greatest 
impact on the marketplace. This application will focus on the process of getting a 
cocument from the final draft stage, as output from a Computer Aided Publishing 
(CAP) system, to the ultimate user organization along with anv subsequent changes or 
updates. The discussion will address this process as it relates to both classified and 
unclassified documents. 

The second application is the extrapolation into a military context of a program 
being implemented by a large Northeastern health insurance organization. Thus 
program is currently the only widely publicized commercial commitment to a large- 
scale implementation of an optical memory card based system by a U.S. company. A 
program similar to this is currently being undertaken by the U.S. Army. Called the 
Individually Carried Record (ICR) program, it uses IC tags worn around the neck to 


store basic personnel data. 


A. A TECHNICAL DOCUMENT PUBLISHING, DISTRIBUTION AND 
UPDATE PROGRANI 


In managing and using large, library-sized data bases it is usually unneccessary, 
and in most cases undesirable, for a particular user to have access to the entire data 
base. Using aircraft maintenance facilities as an example, more information 1s required 
at a depot level maintenance facility than at an orgamizational level facility. 
Consequently, at the organizational level there is less information to manage and it 1s 
used in book-sized and even page-sized quantities. 

To make the ‘paperless ship’ concept a reality, a mass storage medium is needed 
to replace the literally tons of paper technical manuals and directives carried aboard 
the average naval frigate. Other optical media, CD-ROM for example, have been 
proposed as solutions to the mass storage problem. These other media have what 
would in previous years have been called an incredible storage capacity. A single CD- 


ROM can store 270,000 pages of text [Ref. 33: p. 25]. Distributing a single manual in 
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a CD-ROM format is neither cost effective nor logical from a user persnective. A 
Storage medium like a 2.2 Mtbyte optical memory card that holds $00 pages of text or 
200 pages of combined text and graphics is more logical from a user point of view. 
Such a system could be used to produce classified and unelassified documents. 
Revisions and interim changes made to a digital medium would virtually eliminate the 
time and energy spent making pen-and-ink and replace-page changes to technical 
manuals and directives. 
1. Unclassified Documents 

The first step in publishing a document for use with an optical memory card 

system would be preparation of the final document using a Computer Aided Publishing 


(CAP) software package. (See Figure 4.1) The output from the CAP is transferred to 
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Figure 4.1 Unclassified Document Publishing Process. 


some form of transportable digital storage medium, nine-track tape for example. The 
document is then shipped to a contract mass production optical memory card 
publishing facility. DIC is presently the only organization with the facilities to mass 


produce pre-recorded optical memory cards. The contract facility would format and 
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index the data according to the contract specifications. A run of cards would then be 
printed, encapsulated, packaged and returned to the originating agency. ‘The 
Originating agency then distributes the cards to the appropriate organizations. A 
receiving organization could use the card in a desktop-size (personal computer) or 
smaller, portable, document handling workstation. A user needing personal copies of a 
particular document could print them using an inexpensive desktop laser printer. 
Revisions and tnterrm changes could be published in essentially the same 


manner. (See Figure 4.2) An orgamization receiving a change to a document would 


INTERIM CHANGE CARD 
RECEIVED FROM 
ORIGINATING AGENCY 


CHANGE LOADED INTO 
READ/WRITE 
WORKSTATION RUNNING 
UPDATE SOFTWARE 


CHANGE CARD REMOVED 
AND FILED UNTIL NEXT 
REVISION RECEIVED 


ORIGINAL DOCUMENT 
CARD INSERTED INTO 
WORKSTATION 


CHANGES, POINTERS AND 
DATE/TIME STAMPS 
WRITTEN TO ORIGINAL 
DOCUMENT 





Figure 4.2. Document Updating Process. 


place the card containing the change into a workstation with read, write capability and 
run a document updating software package. After the changes have been loaded into 
the workstatron’s memory the user would remove the card containing the changes and 
(tle it until the next revision is received. The original document 1s then inserted into 
the workstation and the changes are written to an unused portion of the card. Pornters 
and date time stamps would also be written along with the changes to allow the card- 
reading software to identify the most recent changes for a particular section of the 


docunient. 
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A word about indexing: The lower the level of an index, word vice chapter for 
example, the greater the ainount of storage space required to store it. For a document 
that is indexed on chapters or sections the index would be relatively stinple and would 
require very little storage space. A document that is indexed on words could easily 
nave an index that is larger, mn terms of storage space required, than the document 
itself, A tradeoff point must be identified, for example page-level indexing, and 
changes issued at that level. Document program monitors at the originating agency 
would need to issue a revised document card incorporating all the current changes 
before the previous card was filled to capacity. 

2. Classified Documents 

Taking into account the seeurity requirements associated with classified 

documents, the publishing process would have to be performed in-house. (See Figure 


4.3) The document ts prepared using CAP software running on TEMPEST approved 
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" Process is the same for update and revision publishing 


Figure 4.3 Classified Document Publishing Process. 


computing facilities. The output from the CAP svstem is sent to a TEMPLEST 
approved high-speed laser optical memory card duplicator which transfers the 
document to pre-formatted blank cards in a manner similar to a laser printer writing to 
paper. The cards can then be distributed in a manner comunensurate with their 
classifications. Revisrons and interim changes can be published and distributed in the 
same fashion. (See igure 4.3) 

By wav of comparison for in-house publishing, the Kodak Model 225 and 


Nerox Model $700 photocopiers have copy rates of 70 pages per minute. (See Table 4) 










TABLE 4 
COri wis SOR NIOUSE DUPLICATING METILODS 


KODAK MODEL 225 
XEROX MODEL 8700 


Copy Rate: 70 pages per second 


Time Required to Copy 200 page Manual: 2.8 min. 
(Combined text and graphics ) 









LASER OPTICAL MEMORY CARD 
DUPLICATOR 


Copy Rate: 100 Kbits/sec. 


Time Required to Duplicate a Single 2 2 Mbyte Card: 2.9 min. 
(200 pages combined text and graphics 800 pages, text only ) 


At that rate, a 200-nage manual containing combined text and graphics could be 
duplicated in 2.8 minutes. A high-speed (100 kbit per second) laser optical memory 
card duplicator could produce the same manual, or an SO0-page manual containing 
Smipecext, in 2.9 minutes. [Ref. 30: p. 10] 

An additional benefit gained from the use of such a system would be a 
dramatic reduction in the space required to store documents aboard ships. (See Table 
5) Converting the 30,393,000 pages of documents required per ship [Ref. 33: p. 27] to 
dual sided 4.4 Mbyte optical memory cards would reduce the storage space required 
from 4,222 vards to 21 vards, a factor of over 200! Optical memory cards would also 
provide benefits in weight savings and increased longevity. An optical memory card 
weighs less than an ounce and has a muininiunt service life of over five years of 


continuous use in the most severe geographic climates with no degradation in 
readability [Ref. 9: p. 2]. 
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TAGs 

NAVAL SHIP'S TECHNICAL MANUAL NS [NT 0G eee 
REQUIREMENTS - PAPER VSSOPRGICAL Viet s Ge alae 

PAPER 

Number of Document PAGES required per ship: 30,393,000° 

30,393,000 pages + 500 pages/ream = 60,786 reams/ship 

60,786 reams x 2 Sinches/ream = 151,965 inches/ship 

151,965 inches + 12 inches/foot = 12,664 feet/ship 

12,664 feet +3 feet/yard = 4,222 yards/ship 


OPTICAL MEMORY CARD 

30,393,000 pages/ship + 1,600 pages/card' = 18,966 cards/ship 
0 04 inches/card* x 18,946 cards/ship = 760 inches/ship 

760 inches/ship + 12 inches/foot = 63 feet/ship 

63 feet/ship + 3 feet/yard = 21 yards/ship 


*Erom Naval Ship's Technical Manual statistics 


tWidth of card plus 2 mil plastic sleeve 


tDual-sided 35mm optical stripe, 2 2 Mbytes per side 





B. AN INDIVIDUAL PERSONNEL RECORD STORAGE AND UPDATE 
PROGRANI 


Quoting Barnes and Sukernick in Ref. 34: 


On Nilay 6, 1985 Blue Cross and Blue Shield of Marvland, Inc. announced the 
LifeCard®, a unigue personal medical history and insurance benefits card... . 
On December 6, 1985, Canon, Inc. of Japan... delivered the first 1iteuea 
optical card peripheral [of 60,000] to Blue Cross/Blue Shield of Maryland for its 
LifeCard® systein. 


The Blue Cross/Blue Shield of Maryland (BC/BSM) LifeCard® is the first 
commercial application of optical memory card technology in the U.S. The LifeCard® 
system stores routine and critical health data, treatment and prescription audit trams 
and insurance coverage and benefits. BC’/BSM intends to issue LifeCards to all of its 
SO millon members and estimates equipinent demand will be as high as 750,000 units 
[Ref. 34: p. 3]. The LifeCard® is intended to be used by hospitals, clinics, doctor's 
offices and pharmacies to provide faster, better, and Icss expensive health care to the 
patients covered by BC’/BSM [Ref. 34: p. 1]. BC,BSM = chose the optical memory card 
for the LifeCard® program for its memory capacity (2.2 Mbyte version) and the 


possiblitics for later memory capacity expansions [Ref. 34: p. 2]. 
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To the DoD and other government agencies considering optical memory cards as 
a solution to the reduction of paperwork the BC’BSM LifeCard'®) program is an 
Important first step in proving the technical and commercial viablitv of optical memory 
card systems. ‘The success of the LifeCard® will provide justification for conducting 
Studies and pilot projects for developing the optical memory card for use in the 
goverment sector. 

One application that could be derived froin the BC’BSM LifeCard® program is 
an mdividually carried personnel record card. The card could have human-readable 
information on one side. such as the photograph and other information present on a 
mimitary 1.1), and an optical stiipe on the other side [Ref 35: p. 6]. The card could be 
partitroned to provide storage space for: 

e Digitized Photograph or Other Biometric Data 
Se service Record Data 

Seen Accord Iata 

e Training Record Dita 

eee tedical Record Data 

e Dental Record Data 

e¢ Securty Clearance and Access Data 

e Commissary and Exchange Privilege Data 

The card could be used for idenufication, deterinining conimuissary/exchange 
privileges and access control for security systems as well as providing personal and 


service related historical data. (See Figure 4.4) 


—_- 


FRONT BACK 
DIGITAL DATA EYE-READABLE DATA 
Biometric Data Photo 


Service Record Signature 
Pay Record Social Security Number 


Training Records Date of Birth 
Medical Record 

Dental Record 

Security Clearance and Access Data 
Commissary and Exchange Privilege Data 





Figure +.4 Contents of the Individual Personnel Record Card. 
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Cards could be updated and verified with a centralized data base on a periodic or 
transactional basis to keep them and the data base sufficiently “backed-up” to provide 
data to replace lost, stolen or mutilated cards. 

The optical memory card has the potential for meeting the military needs for 
recording and iracking personnel data. How great that potential is will depend upon 
the success of BC;BSMs LifeCard® program and others vet to be conducted in the 


SOVERITICMESeC LOL, 
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V. CONCLUSIONS AND RECOMMENDATIONS 


A. CONCLUSIONS 

The optical mernory card is on the edge of a revolution in mass storage 
technology. While currently overshadowed and sometimes confused with CD-ROM 
and other optical disk technologies, the optical memory card will eventually find its 
place as a book-sized storage medium. However, there are still two major obstacles the 
optical memory card must overcome before it can become a hard competitor in the 
optical memory market: Availability and Standardization. As of this writing, optical 
memory card hardware availability 1s limited and attempts to standardize it are 
restricted to the efforts of a small ANSI working group [Ref. 34: p. 3]. As with all new 
technologies, if they are even moderately successful, availability will increase with 
demand and some standard. de facto or otherwise, will emerge in the interest of 
economic competition. 

With these two problems resolved. the optical memory card presents a great 
potential for the storage of book-sized packets of information. Many information 
systems that store and distribute data present an opportunity to emplov tlus 


technology. 


B. RECOMMENDATIONS 

One of the original objectives of this study was to actually publish the thesis in 
its entirety on a single optical memory card as a proof-of-concept demonstration of the 
local publishing capabilities of a PC-based optical memory card svstem. That objective 
could not be inet because of the unavailablity of reader/writer units and the software to 
drive them. This topic is meaningful, especially in the light of increased activity in 


support of the “paperless ship” program. 
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